Typically, the key generation is done on startup, but suvad is not running on most systems. Instead, the key generation was moved to the generic ClearOS "onboot" event (i.e. /var/clearos/events/onboot/suva).